TCS denies UK report on M&S contract, says cyberattack claims are “misleading”

Tata Consultancy Services (TCS) has firmly countered a report from a UK publication that suggested Marks & Spencer (M&S) terminated its contract with the Indian IT firm due to alleged failures related to a cyberattack. TCS labeled the report as "misleading" and factually incorrect, as stated in a filing made to stock exchanges late Sunday. The contentious article from The Telegraph claimed that M&S had dropped a significant helpdesk agreement worth $1 billion with TCS after a cyber breach that supposedly cost the retailer £300 million. However, TCS clarified that the contract in question pertained to a service desk, a relatively minor component of their broader collaboration with M&S. They informed that the competitive tender process for this contract started in January 2025, long before the cyber incident occurred in April 2025. TCS emphasized that the decision to move away from TCS was made independently of the cyber breach, stating that M&S had opted to partner with other vendors well in advance. The firm expressed pride in its ongoing relationship with M&S, highlighting its role as a strategic partner in various areas. Additionally, TCS addressed the cybersecurity concerns raised by the report, clarifying that it does not provide cybersecurity services to M&S, as that responsibility lies with another vendor. The company confirmed that a comprehensive scan of its networks revealed no vulnerabilities on its part. Both TCS and M&S have reiterated that the non-renewal of the helpdesk contract was not related to any cyber incidents.